The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command.
| Software | From | Fixed in |
|---|---|---|
| novell / ichain | 2.2-sp1 | 2.2-sp1.x |
| novell / ichain | 2.2-sp1a | 2.2-sp1a.x |
| novell / ichain | 2.2.113 | 2.2.113.x |
| novell / ichain | 2.2 | 2.2.x |
| novell / ichain | 2.3 | 2.3.x |
| novell / ichain | 2.2-sp2 | 2.2-sp2.x |
| novell / ichain | 2.2-sp3 | 2.2-sp3.x |
| novell / ichain | 2.3-sp2 | 2.3-sp2.x |